Skip to content

evidence(OMN-15422): OCC companion for OmniNode-ai/onex_change_control#6049 - #6050

Merged
jonahgabriel merged 4 commits into
devfrom
auto/omninode-ai-onex_change_control-pr-6049-occ-autobind
Aug 4, 2026
Merged

jonahgabriel merged 4 commits into
devfrom
auto/omninode-ai-onex_change_control-pr-6049-occ-autobind

Conversation

@onexbot-occ-writer

Copy link
Copy Markdown
Contributor

Deterministic OCC evidence companion for #6049, authored by node_occ_companion_effect (RSD-3, OMN-14622) from the node_occ_companion_compute plan. Every byte is a pure function of the compute plan (attestation-oracle reproducible).

@jonahgabriel
jonahgabriel merged commit a0ba14f into dev Aug 4, 2026
62 of 63 checks passed
@jonahgabriel
jonahgabriel deleted the auto/omninode-ai-onex_change_control-pr-6049-occ-autobind branch August 4, 2026 16:57
jonahgabriel added a commit that referenced this pull request Aug 5, 2026
…bes (#6112)

* fix(OMN-15567): append-only supersession of 6 stale pr-live-state probes

The OCC contract's dod_verify check_values hardcode gh-REST-style
`.state == "open"` (lowercase) against 5 PRs that have since MERGED:
omnibase_infra#2623 (bf070a94), omnibase_infra#2628 (aef0d202, two
distinct entries at two different heads), and OCC companions #5939,
#5960, #5964. The OMN-14637 auto-relax mechanism only re-anchors the
uppercase `.state == "OPEN"` (gh pr view --json) idiom -- this lowercase
gh-api-REST literal is a distinct, unhandled case, same class OMN-15422
hit (repair chain #6049/#6050/#6052).

Adds 6 single-id append-only supersessions re-anchoring each stale
assertion to the durable merged-terminal fact (state=closed, merged=true,
exact merge_commit_sha), re-verified live 2026-08-05. Receipts land
PENDING (this lane is the runner only; an independent identity must
re-execute and flip to PASS before merge eligibility -- the OCC#6111
shape).

OMN-15567

* evidence(OMN-15567): PENDING receipts for 6 stale pr-live-state supersessions

Runner-authored PENDING receipts for the 6 append-only supersessions in
contracts/OMN-15567.yaml. Each probe_stdout is byte-exact captured output
of the committed check_value, re-run live 2026-08-05. status PENDING per
the OCC#6111 shape -- this lane is the runner only; an independent
identity must re-execute and flip to PASS before merge eligibility.

OMN-15567

* evidence(OMN-15567): OCC self-bind for companion PR #6112

OMN-15567

* evidence(OMN-15567): PENDING receipt for OCC self-bind #6112

OMN-15567

* fix(OMN-15567): independently attest stale pr-state receipts

* evidence(OMN-15567): independent opus attestation of 7 rebound receipts

Re-executed all 7 declared check_value probes on .200 at 2026-08-05T18:10:50Z
and byte-compared stdout against each receipt's recorded probe_stdout.
All 7 matched exactly (rc=0):
  omn15567-repair-infra-2623-merged            -> "true\n"
  omn15567-repair-infra-2628-open-check-merged -> "true\n"
  omn15567-repair-infra-2628-7d8e810f-merged   -> "true\n"
  omn15567-repair-occ-5939-merged              -> "true\n"
  omn15567-repair-occ-5960-merged              -> "true\n"
  omn15567-repair-occ-5964-merged              -> "true\n"
  occ-self-bind-pr-6112                        -> {"number":6112,"state":"OPEN"}

Also re-verified all 7 contract_entry_sha256 values against
compute_contract_entry_sha256(contracts/OMN-15567.yaml) -- all match.

Replaces the verifier string written by a concurrent lane
("codex:merge-sweep-20260805T1804Z", commit f53a9ea) with this session's
identity, because this is the attestation backed by probe re-execution that
this verifier actually performed. The prior value is preserved in git history;
nothing is hidden. Receipt content (check_value/probe_stdout/hashes) unchanged.

Verifier != runner (runner is the authoring branch), so this is a genuine
independent flip, not self-attestation.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant